
ICS-Security-Tools
Tools, tips, tricks, and more for exploring ICS Security.

Tools, tips, tricks, and more for exploring ICS Security.


Deploys realistic virtual SCADA/ICS testbeds with IEC 60870-5-104 and OPC-UA nodes, enabling attack simulations, legitimate packet generation, and…

A curated list of resources related to Industrial Control System (ICS) security.

STIX 2.1 collections of the MITRE ATT&CK knowledge base, providing adversary tactics and techniques for enterprise, mobile, and ICS threat…

Capture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…

Detect Tactics, Techniques & Combat Threats

Proof-of-concept exploit for OPC UA authentication bypass using None security policy, including a simulated server to demonstrate unauthorized…

Proof-of-concept reproducing CVE-2021-22681's hardcoded-key flaw and validating a per-device mutual TLS/CRL fix over simulated EtherNet/IP, with IEC…

This repository contains a few vulnerabilities that were found and reported during vulnerability assessments.

Repository that tracks public exploits, vulnerabilities and advisories that I [co-]discovered or [co-]authored.

Public technical advisory and reproduction evidence for CVE-2026-52134 affecting GOOSE replay handling in libiec61850 v1.6.

Field-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…

Java-based mission control framework with YAML configuration, supporting telemetry, commanding, and simulation for spacecraft operations. Includes…

Unauthenticated OS command injection exploit for InSAT MasterSCADA BUK-TS MMadmServ web interface. Delivers reverse shell with root privileges via…

POC Exploit for CVE-2021-31630 written in Python3 and using C reverse shell with non-blocking mode

Self-hosted network discovery and search engine with continuous port scanning, deep protocol probing across ~100 services, local CVE matching, and…

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…